DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
Static task
static1
Behavioral task
behavioral1
Sample
da80befcb4b78abaac8632becec8c6ac0d8a3ed57104be2cc2579912ec446cc8.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
da80befcb4b78abaac8632becec8c6ac0d8a3ed57104be2cc2579912ec446cc8.exe
Resource
win10v2004-20240802-en
Target
da80befcb4b78abaac8632becec8c6ac0d8a3ed57104be2cc2579912ec446cc8.exe
Size
44KB
MD5
299d90fd59dde6708ece0a0f73423997
SHA1
a73ec5c571ffa753d11d0d1ed8ef3eadb79a7277
SHA256
da80befcb4b78abaac8632becec8c6ac0d8a3ed57104be2cc2579912ec446cc8
SHA512
bef505bd95d5ab49ca18085f0dc6c48df2e6bf5ce07f27d2702d1c2aad5bbbe905c181faf0efdbae17421d2d414ce8210a777197b33c429bcce833a23bd7c658
SSDEEP
768:bj9EaiyURDkkxPt5NmVrSG+et/GWFQrhwEr0dmw9wxNs8U:l9URDkWPteQG++/GwQrhw80qxI
Checks for missing Authenticode signature.
resource |
---|
da80befcb4b78abaac8632becec8c6ac0d8a3ed57104be2cc2579912ec446cc8.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
HeapAlloc
HeapCreate
HeapReAlloc
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
fputc
free
fwrite
localeconv
malloc
mbstowcs
memcpy
memset
rand
realloc
strerror
strlen
strncmp
vfprintf
wcslen
wcsncat
wcsncpy
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ